IT Services Case Study: How a 35-Person Accounting Firm Cut IT Costs by 40% and Eliminated Downtime

This IT services case study starts the way most do: not with a long-term technology strategy, but with a crisis. 

When the managing partner of a 35-person accounting firm in the Southwest first called Black Box Consulting, her server had just failed for the second time in four months. It was the week before a major tax deadline, and the IT contractor she had been relying on for three years had stopped returning her calls.

‘I was sitting in my office at 7 pm watching my team try to work from their phones,’ she told us later. ‘I knew right then that we had a people problem disguised as a technology problem. And the people problem was that we had no real IT support.’

That conversation led to a three-month engagement that resulted in a 40% reduction in their monthly IT spend, the complete elimination of unplanned downtime in the 12 months that followed, and what the managing partner describes as ‘the single best operational decision we made all year.’

Here is how it happened.

The Situation Before Black Box Consulting

The firm had been in business for eleven years and had grown steadily from a solo practice to a 35-person operation with two office locations. Their technology had grown with them in the way that most small business technology grows: reactively, inconsistently, and with no overarching architecture or plan.

At the time of the initial assessment, the firm’s IT environment included:

• An on-premises server that was seven years old, running an operating system that had reached end of life eighteen months earlier
• No documented backup process – backups were being performed manually by one employee, approximately twice a week, to a USB drive stored in a desk drawer in the same office as the server
• Client data stored across three different platforms: a local server share, a personal Dropbox account belonging to one of the partners, and a legacy document management system that the team had largely stopped using but never formally decommissioned
• No password management policy – the firm used eleven shared passwords across critical systems, and these passwords had never been rotated.
• A part-time IT contractor on an as-needed basis who had become increasingly unresponsive and whose last documented visit to either office was seven months prior

The Black Box Consulting Assessment

Our initial assessment took four hours across both locations. We documented every device, every piece of software, every access credential, every backup process, and every vendor relationship.

The findings were significant:

• The primary server had two early-warning indicators of imminent hard drive failure in its system logs – indicators that had been present for at least three months.
• The Dropbox account containing client documents was using a password that appeared in three publicly known data breach databases.
• Seventeen former employees or contractors still had active credentials to at least one firm system.

We presented these findings to the managing partner in a two-hour readout session. Our report included a prioritized remediation roadmap with estimated costs and timelines for each item.

‘Nobody had ever shown us this information before,’ the managing partner said. ‘We knew things were not ideal. We had no idea how exposed we actually were.’ This moment, more than any other, is why this IT services case study exists: to show what an honest assessment can reveal.

The Migration and Modernization

Over the following 90 days, Black Box Consulting executed a phased infrastructure modernization. The sequence was designed to eliminate the highest-risk items first while minimizing disruption to an accounting firm approaching its busy season.

Phase 1: Emergency Stabilization (Weeks 1-2)

The first two weeks focused on eliminating immediate critical risks. This included revoking the 17 inactive credentials, changing all shared passwords and implementing a password management system, and placing the aging server on enhanced monitoring while the longer-term migration was planned.

Phase 2: Infrastructure Migration (Weeks 3-8)

The primary on-premises server was migrated to a secure cloud infrastructure. Client documents were consolidated from the three separate platforms into a single, properly permissioned document management environment. Automated daily backups were configured with monthly restore tests and off-site redundancy.

Phase 3: Compliance and Documentation (Weeks 9-12)

The final phase addressed the firm’s compliance posture. This included creating a formal data security policy, documenting all systems and access procedures, implementing multi-factor authentication across all critical systems, and establishing a quarterly security review cadence.

The Results

Twelve months after the completion of the initial engagement, the results across every measurable dimension in this IT services case study were positive.

• Zero unplanned downtime incidents in the 12 months following migration, compared to 7 documented incidents in the prior 12-month period
• Monthly IT spend reduced by 40%, primarily because the elimination of emergency contractor calls and the cost of maintaining aging on-premises hardware exceeded the cost of managed cloud infrastructure and Black Box Consulting’s monthly service fee
• Average response time for IT support requests reduced from approximately 6 hours to under 45 minutes

The managing partner offered her own assessment of the less quantifiable results: ‘I used to dread Monday mornings because something was always broken or somebody could not access something. Now I genuinely do not think about IT. That peace of mind is worth more than the cost savings, honestly.’

What Made This IT Services Case Study Work

Looking back at this IT services case study, a few factors stand out as particularly important to the outcome.

First, the initial assessment was thorough and honest. There was no glossing over difficult findings or softening of risk levels to avoid an awkward conversation. The managing partner needed accurate information to make good decisions, and we provided it.

Second, the remediation was sequenced intelligently. An accounting firm cannot absorb a complete technology overhaul in the middle of tax season. The phasing of the work respected their operational calendar while still addressing the most critical risks first.

Third, the ongoing managed services relationship means that the firm’s IT environment is continuously monitored and maintained. The vulnerabilities that accumulated over eleven years of reactive IT management will not have an opportunity to re-accumulate.

This is what a managed IT relationship is supposed to look like: a technology partner that understands your business well enough to make technology decisions that serve your operations, not just your infrastructure.